c09eb85b8eea49c2f982ef987cacaf6f5301242fc5aca5efaafda8e13c88e865

Sharing

Copy URL Twitter E-mail

General

Target

c09eb85b8eea49c2f982ef987cacaf6f5301242fc5aca5efaafda8e13c88e865
Size

19KB
MD5

ba5048e5c54534ce6206a8e4b3c8c9ba
SHA1

c8a011097ccc47432a88d42725e123fbf51678ff
SHA256

c09eb85b8eea49c2f982ef987cacaf6f5301242fc5aca5efaafda8e13c88e865
SHA512

09ef825bbab93e93cb573958c154268495575cd6574bd25b2b3fe6c59f130017b970c00d2e13dac3e6386643ce17f82a4ec3f5271acbb927c4d296cf7931c661
SSDEEP

384:uMKCyndRP57ki9OVdX1s7jw6byATs98ehQAvRdZd58DzsKQxhZxOcFo0x:YzndRB7ki9We86kvQqEDzsKQ7Zxdb

Score

N/A

Malware Config

Signatures

Files

c09eb85b8eea49c2f982ef987cacaf6f5301242fc5aca5efaafda8e13c88e865
.exe windows x86

80a5042730413a0c4d2565fcf23f827c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharPrevW
GetWindowRect
PeekMessageW
GetDlgItem
GetSystemMetrics
GetDC
OemToCharA
ReleaseDC
EnableWindow
SetWindowTextW
LoadStringW
SendMessageW
DestroyWindow
IsWindow
SetDlgItemTextW
CharUpperW
ExitWindowsEx
GetDlgItemTextW
MessageBeep
EndDialog
MsgWaitForMultipleObjects
UpdateWindow
GetDesktopWindow
CreateDialogParamW
MessageBoxW
SendDlgItemMessageW
ShowWindow
SetWindowPos
CharNextA
CharNextW
DispatchMessageW
DialogBoxParamW

gdi32

GetDeviceCaps
DeleteObject
GetStockObject
CreateFontIndirectW
GetObjectW

crypt32

CryptFormatObject

msvcrt

malloc
_wcsicmp
_initterm
_ultow
_XcptFilter
_wcsnicmp
wcsncmp
memmove
_wtol
memcpy
_amsg_exit
bsearch
_wtoi
_vsnprintf
free
_setjmp3
_vsnwprintf
_adjust_fdiv
memset
longjmp

ole32

CoTaskMemFree
OleUninitialize
OleInitialize

usp10

ScriptGetProperties

kernel32

GetCurrentThreadId
HeapAlloc
SearchPathW
LoadLibraryW
WritePrivateProfileSectionW
CreateProcessW
CreateFileMappingW
DisableThreadLibraryCalls
lstrlenW
GetPrivateProfileIntW
QueryPerformanceCounter
Sleep
FindResourceExW
HeapFree
GetVolumeInformationW
GetEnvironmentVariableW
SetLastError
GetDiskFreeSpaceW
WideCharToMultiByte
GetSystemTimeAsFileTime
lstrcmpiW
FindResourceW
GetFullPathNameW
LoadResource
GetTickCount
GetTempFileNameW
CopyFileW
MoveFileExW
GetLastError
MultiByteToWideChar
CloseHandle
GetPrivateProfileSectionW
GetPrivateProfileStringW
RemoveDirectoryW
SetFilePointer
FindNextFileW
InterlockedCompareExchange
LockResource
GetTempPathW
WriteFile
UnhandledExceptionFilter
LocalReAlloc
VirtualAlloc
GetWindowsDirectoryW
SetFileAttributesW
lstrcmpiA
GetSystemDefaultUILanguage
GetFileSize
FindClose
GetProcAddress
GetVersionExW
GetSystemInfo
FreeLibrary
InterlockedExchange
LoadLibraryExW
MulDiv
GetModuleFileNameW
TerminateProcess
FormatMessageW
GetDriveTypeW
EnumResourceLanguagesW
GetCurrentProcess
SetUnhandledExceptionFilter
CreateDirectoryW
UnmapViewOfFile
GetFileTime
GetFileAttributesW
SizeofResource
GetUserDefaultUILanguage
WritePrivateProfileStringW
LocalFree
GetCurrentProcessId
GetLocaleInfoW
LocalAlloc
SetFileTime
ExpandEnvironmentStringsW
RtlUnwind
ReadFile
GetLocalTime
MapViewOfFile
lstrlenA
GetProfileStringW
GetShortPathNameW
MoveFileW
GetSystemDirectoryW
CreateFileW
AttachConsole
GetProcessHeap
lstrcmpW
FindFirstFileW
DeleteFileW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

StrStrIW
StrRChrW
StrChrW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
PathBuildRootW
PathAddBackslashW
PathCombineW

advapi32

RegOpenKeyExW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegLoadKeyW
EqualSid
RegDeleteKeyW
RegDeleteValueW
RegFlushKey
RegCloseKey
RegUnLoadKeyW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegSaveKeyW
RegQueryValueExA
AllocateAndInitializeSid
RegEnumKeyW
LookupPrivilegeValueW
RegQueryInfoKeyW
RegOpenKeyExA
FreeSid
GetTokenInformation
RegSetValueW

setupapi

SetupDefaultQueueCallbackW
SetupGetLineTextW
SetupFindFirstLineW
SetupCloseInfFile
SetupSetDirectoryIdW
SetupFindNextLine
SetupOpenInfFileW
SetupInstallFromInfSectionW
SetupGetStringFieldW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupQueueCopyW
SetupCloseFileQueue
SetupCommitFileQueueW

Sections

.text
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80a5042730413a0c4d2565fcf23f827c

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

crypt32

msvcrt

ole32

usp10

kernel32

version

shlwapi

advapi32

setupapi

Sections

.text Size: 512B - Virtual size: 432B

.rsrc Size: 12KB - Virtual size: 11KB

.idata Size: 6KB - Virtual size: 5KB

.data Size: - Virtual size: 80KB

.rdata Size: 5KB - Virtual size: 4KB

.text
Size: 512B - Virtual size: 432B

.rsrc
Size: 12KB - Virtual size: 11KB

.idata
Size: 6KB - Virtual size: 5KB

.data
Size: - Virtual size: 80KB

.rdata
Size: 5KB - Virtual size: 4KB